Use-After-Free Vulnerability in Logitech G920 Driving Force Racing Wheel

CVE-2026-43049

What is CVE-2026-43049?

A use-after-free vulnerability has been identified in the Logitech G920 Driving Force Racing Wheel's driver within the Linux kernel. During the initialization of force feedback functionality, if the initialization fails, the driver returns an error while the userspace interactions remain intact. This scenario may lead to the potential misuse of dangling references in userspace if the error is disregarded. The intended behavior, as designed by the author, is to issue a warning while maintaining device functionality sans the force feedback feature. It is crucial for users to be aware of this issue to mitigate risks associated with the improper handling of driver errors.

References